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Issue a certificate and private key to the client for identifying the client in a transaction 



-2-1. 



Store the certificate and private key in a token used by the client 



'1 



Verify client identity with the certificate stored in the token before distributing 

data to the client 



Generate a message associated with data requested by the client and the 
token used by the client when requesting the data 



Distribute the data and the associated message to the client 



FIG. 2 
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Company provides client with information on establishing an account 
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Server sends client a certificate and key exchange information 
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Client sends server key exchange information and certificate verification 
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Server and client compute a session key 
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Client sends server a user name, password, credit card number and other 

information 
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Server verifies credit card number and establishes account for client 
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Server generates a private key for client, issues a certificate for client, encrypts 
both with session key, and stores them in client token 
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Client downloads media player into client computer 



FIG. 3 
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Server sends client a server certificate and requests client certificate 



Client sends server his certificate, token distinguishing number, server certificate 

verification 



Server verifies client's identity with client certificate 



Server generates symmetrical key 



Server computes digital message for content file and client token 



Server encrypts content file using symmetrical key and sends it and digital 

message to client 



FIG. 4 
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Open media player and file 
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Media player asks client for token 
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Media player reads DN from token 






Media player verifies digital message with public key from server 



FIG. 5A 
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Check DN 
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Check time period 



Decrypt symmetrical key using private key stored in token 
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Decrypt content using symmetrical key 
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Play file 



FIG. 5B 
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FIG. 7 



